Skip to main content

appbinary-inspector

Static inspection tools plus an open-source, disk-paged character-model architecture.

Features

  • Detects PE, ELF, Mach-O, ZIP, 7z, and RAR headers
  • Calculates SHA-256 and SHA-1 hashes
  • Extracts readable strings and entropy
  • Reads basic PE header metadata
  • Extracts embedded ZIP archives and carves recognizable binary signatures
  • Exports PE headers and raw binary sections for authorized analysis
  • Builds a compact tokenizer for source code, logs, or extracted text
  • Provides editable PyTorch classifier, autoencoder, and transformer templates
  • Keeps CardStack model cards as separately stored 4-bit SSD files
  • Loads only router-selected cards into a small LRU cache during generation
  • Generates one next byte at a time for true character-level output

Install

pip install appbinary-inspector

Use

appbin inspect program.exe
appbin extract program.exe --output extracted
appbin binary-extract program.exe --output pe_parts
appbin tokenize source.py --vocab source-tokenizer.json
appbin model-template classifier

CardStack: low-VRAM model experiments

CardStack is a small trainable byte-level language model. Its expert cards are stored as separate 4-bit files. At inference, inactive cards remain on disk and the cache retains only a limited number of recently selected cards.

from appbinary_inspector import CardStackConfig, CardStackLM, train_next_character

model = CardStackLM(CardStackConfig(width=128, layers=4, cards_per_layer=8, active_cards=2, cache_cards=4))
losses = train_next_character(model, open("training.txt", encoding="utf-8").read(), steps=500)
model.save("my-card-model")  # writes a base file plus separate 4-bit card files

paged = CardStackLM.load("my-card-model")
print(paged.generate("Hello", new_characters=80))

CLI version:

appbin card-create --output my-card-model --width 128 --layers 4 --cards 8 --active-cards 2
appbin card-train my-card-model training.txt --steps 500
appbin card-generate my-card-model "Hello" --characters 80

Text chat interface

Open a local chat box after training a model. It binds only to your computer, opens in your browser, and never sends prompts to a remote service.

appbin chat my-card-model

Python import API

Use the model from normal Python code without a terminal command interface:

from appbinary_inspector import appbincardcr

mycard = appbincardcr("my-card-model")
reply = mycard("Explain gravity", output=True)

# Or call it in one line:
reply = appbincardcr(mycard, "Explain gravity", output=True)

Hugging Face models

Hub IDs and local Transformers directories work through the same API.

from appbinary_inspector import appbincardcr

mycard = appbincardcr(
    "Qwen/Qwen2.5-1.5B-Instruct",
    backend="huggingface",
    device_map="auto",
)
mycard("Explain gravity", output=True)

Install support with pip install "appbinary-inspector[huggingface]". For CUDA 4-bit loading, install appbinary-inspector[huggingface-4bit] and pass load_in_4bit=True. Standard Hugging Face models keep their original dense layout; only models trained or converted for CardStack use disk-card paging.

This reduces active model-card memory. It does not make a dense, unmodified 70B model fit instantly on a low-VRAM GPU: disk bandwidth and CPU/GPU transfer time become the tradeoff, and models need to be trained for sparse routing.

PyTorch models

Install optional PyTorch support:

pip install "appbinary-inspector[torch]"
from appbinary_inspector.torch_builder import create_model, preset

config = preset("classifier")
config["layers"][0]["out_features"] = 512
model = create_model(config)

Safety

Targets are read as bytes only and never executed. The package does not defeat encryption, DRM, licensing controls, passwords, or code protections. It can analyze plaintext, export raw PE sections, and extract recognizable embedded content from files you are authorized to inspect.

Metadata

Release files for appbinary-inspector 0.7.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for appbinary-inspector 0.7.0
File Size Uploaded Provenance Actions
appbinary_inspector-0.7.0.tar.gz 15.9 kB With provenance Details for appbinary_inspector-0.7.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for appbinary-inspector 0.7.0
File Interpreter ABI Platform Actions
appbinary_inspector-0.7.0-py3-none-any.whl Python 3 none any Details for appbinary_inspector-0.7.0-py3-none-any.whl

Total release size: 36.2 kB

Release files / appbinary_inspector-0.7.0.tar.gz

Download URL appbinary_inspector-0.7.0.tar.gz
Size 15.9 kB
Tags Source
SHA-256 checksum
How to use checksums
d39148bd76cbd668fca8aebfe7c89995a5b48989fecc0ab03d20d879db1048af
BLAKE2b-256 checksum
How to use checksums
4b2194920c1c0543ed9f093641966cfbe2e316c3f0be5b68be617a994e24c902
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 11, 2026.

Transparency log

Release files / appbinary_inspector-0.7.0-py3-none-any.whl

Download URL appbinary_inspector-0.7.0-py3-none-any.whl
Size 20.3 kB
Tags Python 3
SHA-256 checksum
How to use checksums
fde07bcd399b8e89857f241b680f5086abcf4aa1611aaa241cc9a6ce4d2489c5
BLAKE2b-256 checksum
How to use checksums
444fd22e5d2f89194033b2bed5fb0dd28754fae5a89fdcafa08336f5eb863bfb
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 11, 2026.

Transparency log

Security for appbinary-inspector 0.7.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

Both files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for appbinary_inspector-0.7.0.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 11, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page